Manifest
$ rpki-client -vvf repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.mft
File: C33BE6D76C1444B4695CC56D706802967A2A404E.mft (raw, json)
Hash identifier: haz1PIDR5WXuJtu8NwKOaPvraLhWw3HrZuuvSsUtJ9k=
Subject key identifier: 5F:CB:72:A6:BD:60:44:33:A2:C6:29:A2:88:3E:46:28:35:F8:9A:83
Authority key identifier: C3:3B:E6:D7:6C:14:44:B4:69:5C:C5:6D:70:68:02:96:7A:2A:40:4E
Certificate issuer: /CN=C33BE6D76C1444B4695CC56D706802967A2A404E
Certificate serial: 328B50D3E2C21269B9D147C20F0A8C96DE543738
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C33BE6D76C1444B4695CC56D706802967A2A404E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.mft
Manifest number: D8
Signing time: Thu 30 Jan 2025 05:11:34 +0000
Manifest this update: Thu 30 Jan 2025 05:06:34 +0000
Manifest next update: Sun 02 Feb 2025 11:32:34 +0000
Files and hashes: 1: C33BE6D76C1444B4695CC56D706802967A2A404E.crl (hash: OnLo7UB9/xHocjU8pAcmleFdCyqjWSow0SYwKDxLk94=)
2: 3130332e35352e33312e302f32342d3234203d3e20313530343834.roa (hash: hJMRzuFAspptn4AlzH4LAwOhzmHjNIsN+aWqgtRAR7g=)
3: 3130332e35352e33302e302f32342d3234203d3e20313530343834.roa (hash: i9hzv6Lh5XhsF06igSnWbdzwnT3e+2hyiqqtyUqGr60=)
4: 3130332e35352e33302e302f32332d3233203d3e20313530343834.roa (hash: Vy1WXfRVoaco1i9g0rlgCBYNCSdI50Y1sxWO96U5Kog=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:8b:50:d3:e2:c2:12:69:b9:d1:47:c2:0f:0a:8c:96:de:54:37:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C33BE6D76C1444B4695CC56D706802967A2A404E
Validity
Not Before: Jan 30 05:06:34 2025 GMT
Not After : Feb 2 11:32:34 2025 GMT
Subject: CN=5FCB72A6BD604433A2C629A2883E462835F89A83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:14:63:ad:2a:fb:60:5c:86:69:3b:e3:19:94:
e9:21:91:fa:c6:46:66:e9:85:fa:95:d4:ea:58:24:
b9:28:93:a0:49:8c:a5:58:0d:44:c0:a2:be:43:9b:
d0:f2:ed:d9:90:6c:0f:db:87:a6:25:71:dc:ee:de:
c8:6e:bb:53:ff:d0:d5:37:94:29:1d:3e:ca:f7:54:
c4:fd:44:b1:21:5b:b5:50:3a:62:ae:8b:a0:d8:d8:
72:6d:f5:0d:a4:32:61:86:0a:04:1f:e8:f6:03:50:
cb:c6:9d:eb:bd:16:4e:f2:d8:a4:14:75:f3:3b:23:
78:5d:a1:a8:40:5e:3d:0a:59:7b:a4:79:87:d4:f4:
71:af:0e:c0:94:47:bc:6c:55:86:d4:c5:11:ec:0f:
8d:4f:84:f4:32:6c:09:05:16:a4:af:5c:87:58:a1:
37:24:51:60:9e:e0:5f:3b:de:3d:b0:73:85:db:1d:
f6:cf:37:a5:db:34:95:f9:f8:97:9a:46:a6:fb:df:
07:3c:5c:b3:50:c8:73:23:1d:9f:4a:f8:43:d7:84:
57:7d:91:38:83:6b:15:2a:fb:44:7c:48:d7:36:be:
63:40:e9:f1:ee:94:29:b8:b7:16:55:1b:78:68:c4:
f7:71:a9:8b:10:e6:ee:c8:cd:4a:d8:13:95:b2:73:
6a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:CB:72:A6:BD:60:44:33:A2:C6:29:A2:88:3E:46:28:35:F8:9A:83
X509v3 Authority Key Identifier:
keyid:C3:3B:E6:D7:6C:14:44:B4:69:5C:C5:6D:70:68:02:96:7A:2A:40:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C33BE6D76C1444B4695CC56D706802967A2A404E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:eb:41:41:89:cc:a9:11:a6:70:b3:05:05:fd:9b:c4:37:0d:
f5:e6:23:fb:23:21:2e:f8:8a:a0:42:8e:a4:36:5a:d8:b8:41:
c0:8b:c7:64:fe:85:29:e8:91:3f:50:45:0d:51:5f:d1:35:e5:
66:08:ce:4f:41:a1:bf:90:30:08:ce:ac:19:3f:49:d1:4e:de:
72:16:78:9b:3e:b4:e3:0f:c4:e7:71:45:76:7b:dd:3c:23:9a:
ee:1e:35:61:8b:e6:05:48:35:6d:31:4e:fc:7e:3c:ff:47:9d:
9a:39:fa:13:d0:15:ad:db:3c:bb:62:88:f5:cd:9d:e3:b6:2a:
73:37:8b:3d:41:22:0e:11:c6:05:4f:d3:a1:49:a0:d6:f7:3a:
07:ec:d3:0d:fe:a2:67:66:14:be:0f:7c:c9:3c:fb:cb:4c:f9:
81:14:e1:c0:76:68:1c:26:b3:b9:f1:20:ba:e8:04:61:cd:77:
67:82:04:a8:92:6a:ae:8f:d2:f3:32:cf:79:8f:a8:42:dc:8b:
ee:14:cd:04:83:f1:9b:10:66:04:10:db:d1:d9:9c:1c:71:9d:
31:57:8d:2c:64:d3:52:33:10:56:50:c2:fc:ca:8b:02:fd:d3:
bd:46:4d:06:3b:57:76:51:ef:6b:db:1b:6e:bf:2c:f4:2b:6d:
b2:7f:5c:84
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUMotQ0+LCEmm50UfCDwqMlt5UNzgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzMzQkU2RDc2QzE0NDRCNDY5NUNDNTZENzA2ODAyOTY3
QTJBNDA0RTAeFw0yNTAxMzAwNTA2MzRaFw0yNTAyMDIxMTMyMzRaMDMxMTAvBgNV
BAMTKDVGQ0I3MkE2QkQ2MDQ0MzNBMkM2MjlBMjg4M0U0NjI4MzVGODlBODMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDFGOtKvtgXIZpO+MZlOkhkfrG
RmbphfqV1OpYJLkok6BJjKVYDUTAor5Dm9Dy7dmQbA/bh6Ylcdzu3shuu1P/0NU3
lCkdPsr3VMT9RLEhW7VQOmKui6DY2HJt9Q2kMmGGCgQf6PYDUMvGneu9Fk7y2KQU
dfM7I3hdoahAXj0KWXukeYfU9HGvDsCUR7xsVYbUxRHsD41PhPQybAkFFqSvXIdY
oTckUWCe4F873j2wc4XbHfbPN6XbNJX5+JeaRqb73wc8XLNQyHMjHZ9K+EPXhFd9
kTiDaxUq+0R8SNc2vmNA6fHulCm4txZVG3hoxPdxqYsQ5u7IzUrYE5Wyc2p9AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUX8typr1gRDOiximiiD5GKDX4moMwHwYDVR0j
BBgwFoAUwzvm12wURLRpXMVtcGgClnoqQE4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
ZDcwM2I4MC0yZTc4LTRkMTEtYWI3NC0wODAxN2U0MjJkNmUvMC9DMzNCRTZENzZD
MTQ0NEI0Njk1Q0M1NkQ3MDY4MDI5NjdBMkE0MDRFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQzMzQkU2RDc2QzE0NDRCNDY5NUNDNTZENzA2ODAyOTY3QTJB
NDA0RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGQ3MDNiODAtMmU3OC00ZDExLWFi
NzQtMDgwMTdlNDIyZDZlLzAvQzMzQkU2RDc2QzE0NDRCNDY5NUNDNTZENzA2ODAy
OTY3QTJBNDA0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAB7rQUGJzKkRpnCzBQX9m8Q3DfXmI/sjIS74
iqBCjqQ2Wti4QcCLx2T+hSnokT9QRQ1RX9E15WYIzk9Bob+QMAjOrBk/SdFO3nIW
eJs+tOMPxOdxRXZ73Twjmu4eNWGL5gVINW0xTvx+PP9HnZo5+hPQFa3bPLtiiPXN
neO2KnM3iz1BIg4RxgVP06FJoNb3Ogfs0w3+omdmFL4PfMk8+8tM+YEU4cB2aBwm
s7nxILroBGHNd2eCBKiSaq6P0vMyz3mPqELci+4UzQSD8ZsQZgQQ29HZnBxxnTFX
jSxk01IzEFZQwvzKiwL9071GTQY7V3ZR72vbG26/LPQrbbJ/XIQ=
-----END CERTIFICATE-----
Generated at Thu Apr 24 17:07:43 2025 by rpki-client